+ Post New Thread
Results 1 to 10 of 10
Windows Server 2008 Thread, GPO not applying to organisation unit in Active Directory in Technical; Hi, I've just configured and set up a brand new Windows 2008 Server. It's going to be our first AD ...
  1. #1
    swpmre's Avatar
    Join Date
    Sep 2007
    Location
    Salford, Greater Manchester
    Posts
    72
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    17

    GPO not applying to organisation unit in Active Directory

    Hi,

    I've just configured and set up a brand new Windows 2008 Server. It's going to be our first AD server.

    I've created a couple of test users, and I can logon to a laptop using their username / password, in the newly created domain.

    I've created a organisation unit (called student) and moved the users into that OU.

    I've then created a GPO, linked it to that OU and setup some test settings (prevent access to Control Panel / hide recycle bin etc etc).

    However, when I logon on to the laptop, using a username that is definitely inside that OU, the Group Policy is never applied. I've tried rebooting everything, forcing Group Policy Updates, creating a new GPO from scratch, creating a new user, but nothing works.

    Since I am effecitvely following a test lesson from the Fundamentals of Win Server 2008 course that I did a few weeks ago, I cannot see what I am doing wrong. Perhaps there is something else that is not setup correctly that I've forgotten, because everything else seems fine.

    Any ideas?

  2. #2


    Join Date
    Mar 2009
    Location
    Leeds
    Posts
    6,207
    Thank Post
    218
    Thanked 812 Times in 694 Posts
    Rep Power
    274
    do any settings from other policies apply (try making a obvious but minor change to default domain policy see what happens)

    also worth running rsop.msc see what policies it thinks it should apply

  3. #3
    swpmre's Avatar
    Join Date
    Sep 2007
    Location
    Salford, Greater Manchester
    Posts
    72
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    17
    Ah. No, made a minor change to the default domain policy and this hasn't been applied.

    Any ideas what this might indicate?

  4. #4

    Join Date
    Dec 2009
    Posts
    245
    Thank Post
    5
    Thanked 28 Times in 26 Posts
    Rep Power
    13
    1) I'm guessing you have not blocked Inheritance inheritance anywhere in your structure?

    2) Have you filtered the GPO to only to certain users\groups

    3) Have you filtered to apply to a particular WMI service?

    4) Have you made sure that the policy settings you have made are under User Configuration and not Computer Configuration?

    5) Have you made sure the User Configuration is enabled?

    6) Check the Group policy ordering, to make sure your policy applies last (top of the list)

    when you run a GPRESULT /R does it tell your your policy should be applying?

    Also I assume you are operating all in 1 domain? otherwise you might need to consider loopback

  5. #5
    brunanburh's Avatar
    Join Date
    Dec 2005
    Location
    Burnley
    Posts
    3
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    I have had similar problems and tracked it down to media sense.

    Have a look at - How to disable the Media Sensing feature for TCP&#47IP in Windows

    It can be weird and affect som machines and not others

  6. #6

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,387
    Thank Post
    797
    Thanked 1,585 Times in 1,388 Posts
    Blog Entries
    10
    Rep Power
    427
    Are you clients DNS settings pointing to your DC?

  7. Thanks to FN-GM from:

    swpmre (21st June 2011)

  8. #7

    Join Date
    Oct 2008
    Posts
    211
    Thank Post
    2
    Thanked 11 Times in 11 Posts
    Rep Power
    21
    <ignore, re read post)

  9. #8
    swpmre's Avatar
    Join Date
    Sep 2007
    Location
    Salford, Greater Manchester
    Posts
    72
    Thank Post
    14
    Thanked 3 Times in 2 Posts
    Rep Power
    17
    Thanks FN-GN - That's the one. The laptop was not pointing to this server as the DNS. Seems to work ok now. Cheers everyone for all your positive and thoughtful suggestions.

  10. #9

    FN-GM's Avatar
    Join Date
    Jun 2007
    Location
    UK
    Posts
    15,387
    Thank Post
    797
    Thanked 1,585 Times in 1,388 Posts
    Blog Entries
    10
    Rep Power
    427
    Quote Originally Posted by swpmre View Post
    Thanks FN-GN - That's the one. The laptop was not pointing to this server as the DNS. Seems to work ok now. Cheers everyone for all your positive and thoughtful suggestions.
    Not a problem, you will probably find the machines will run faster now as well during login and startup.

  11. #10
    RobBaxter's Avatar
    Join Date
    Jun 2011
    Location
    Baldock
    Posts
    93
    Thank Post
    8
    Thanked 21 Times in 15 Posts
    Blog Entries
    1
    Rep Power
    9
    Nice one FN-GM, was just about to reply with that and saw you beat me to it .

    Rule one of Windows AD Domains (check the DNS). Dependant is not the word... Absolutely required so things don't die horibly is more like it. I would say after an install 30% of all problems are DNS related . Also i can't wait to implement IPv6 (*sarcisum*) you just know thats going to completed screw with my DNS for no reason at all

SHARE:
+ Post New Thread

Similar Threads

  1. GPO and Active Directory...HELP
    By erfanos in forum Windows
    Replies: 1
    Last Post: 18th May 2011, 07:26 AM
  2. Icon Transparency using Active Directory and Active Desktop Backgrounds
    By steveo2000 in forum Windows Server 2000/2003
    Replies: 2
    Last Post: 19th May 2010, 09:50 AM
  3. gpo in W2K3 Active Directory domain
    By PLR in forum Windows Server 2000/2003
    Replies: 0
    Last Post: 20th February 2009, 04:16 PM
  4. Replies: 7
    Last Post: 31st January 2008, 12:17 PM
  5. Setting up test scenario on Server 2003/Active Directory/GPO
    By tosca925 in forum How do you do....it?
    Replies: 20
    Last Post: 24th January 2006, 11:38 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •